evaluate thread safety of storage package

[necheffa]

The storage package may have race conditions when accessing certificates. See pull #16 for more discussion. Note that if file locks are used they will need to be implemented in a cross-platform way.

Some design work is needed, since the storage package is intended to be private to Goca, it may make more sense to implement any kind of locking at a higher level of abstraction.